<%
Response.Buffer = True
Response.ExpiresAbsolute = Now() - 1
Response.Expires = 0
Response.CacheControl = "no-cache"
response.Charset="gb2312"
From_url = Cstr(Request.ServerVariables("HTTP_REFERER"))
Serv_url = Cstr(Request.ServerVariables("SERVER_NAME"))
if mid(From_url,8,len(Serv_url)) <> Serv_url then
response.write " "
response.end
end if
Set CmsDjUser= New CmsDj_Com_User
action=request("action")
if request("slogin")="ok" then
name=unescape(request("name"))
if request("name")="" then
Response.Write(escape("Err_100"))
Response.End
elseif InStr(name," ")<>0 or InStr(name,"'")<>0 or InStr(name,"`")<>0 or InStr(name,"=")<>0 or InStr(name,"-")<>0 or InStr(name,",")<>0 or InStr(name,"""")<>0 then
Response.Write(escape("Err_101"))
Response.End
elseif request("pwd")="" then
Response.Write(escape("Err_102"))
Response.End
else
pwd=md5(unescape(request("pwd")))
Set Rs=CmsDjUser.GetRs("",0,"username='" & name & "' and password='" & pwd &"'")
if rs.bof and rs.eof then
Response.Write(escape("Err_103"))
Response.End
else
rs("LastLoginIP")=UserTrueIP
rs("LastLoginTime")=now()
rs("LoginTimes")=rs("LoginTimes")+1
rs.update
Response.Cookies(Uservar&"CMSDJ_USER")("User_Name")=name
Response.Cookies(Uservar&"CMSDJ_USER")("User_Pwd")=pwd
Response.Cookies(Uservar&"CMSDJ_USER")("uid")=rs("userid")
Response.Cookies(Uservar&"CMSDJ_USER")("LoginTimes")=rs("LoginTimes")
Response.Cookies(Uservar&"CMSDJ_CHECK")("uid")=rs("userid")
Response.Cookies(Uservar&"CMSDJ_USER")("Md5Name") = md5(wdsn&name)
Response.Cookies(Uservar&"CMSDJ_CHECK")("uid")=rs("userid")
Response.Cookies(Uservar&"CMSDJ_CHECK").Expires=Date+365
rs.close
set rs=nothing
end if
end if
end if
if request.QueryString("Ylmv_Com")="logout" then
Response.Cookies(Uservar&"CMSDJ_USER")("User_Name")=""
Response.Cookies(Uservar&"CMSDJ_USER")("User_Pwd")=""
Response.Cookies(Uservar&"CMSDJ_USER")("uid")=""
Response.Cookies(Uservar&"CMSDJ_CHECK")("uid")=""
Response.Cookies(Uservar&"CMSDJ_USER")("Grade")=""
Response.Cookies(Uservar&"CMSDJ_USER")("LoginTimes")=""
Response.Cookies(Uservar&"CMSDJ_USER")("userhidden")=""
Response.Cookies(Uservar&"CMSDJ_USER")("Md5Name") = ""
end if
if Request.Cookies(Uservar&"CMSDJ_USER")("User_Name")="" or isnull(Request.Cookies(Uservar&"CMSDJ_USER")("User_Name")) or Request.Cookies(Uservar&"CMSDJ_USER")("User_Pwd")="" or isnull(Request.Cookies(Uservar&"CMSDJ_USER")("User_Pwd")) then
UserLogined=False
else
function ReplaceBadChar(strChar)
if strChar="" then
ReplaceBadChar=""
else
ReplaceBadChar=replace(replace(replace(replace(replace(replace(replace(strChar,"'",""),"*",""),"?",""),"(",""),")",""),"<",""),".","")
end if
end function
UserID=clng(request.Cookies(Uservar&"CMSDJ_USER")("uid"))
UserName=ReplaceBadChar(request.Cookies(Uservar&"CMSDJ_USER")("User_Name"))
PassWord=ReplaceBadChar(request.Cookies(Uservar&"CMSDJ_USER")("User_Pwd"))
Set Rs=CmsDjUser.GetRs("UserID,UserName,NiCheng",0,"UserID=" & UserID &" and UserName='" & UserName & "' and PassWord='" & PassWord & "'")
IF not Rs.eof Then
UserLogined=True
CmsDj_Com_UserID=rs(0)
CmsDj_Com_UserName=rs(1)
CmsDj_Com_NiCheng=rs(2)
End IF
rs.close
set rs=nothing
End IF
if UserLogined=True then
showuser="